Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/ikus060/rdiffweb

A simplified backup management software for quick access to your archives through an efficient web interface.
https://github.com/ikus060/rdiffweb

backup backup-cli backup-database backup-files backup-manager backup-script backup-solution backup-tool backup-utility backups debian encoding ldap quota rdiff-backup rdiffweb restore ssh-key user-quota web-interface

Last synced: 3 months ago
JSON representation

A simplified backup management software for quick access to your archives through an efficient web interface.

Host: GitHub
URL: https://github.com/ikus060/rdiffweb
Owner: ikus060
License: gpl-3.0
Created: 2012-10-22T14:14:23.000Z (about 12 years ago)
Default Branch: master
Last Pushed: 2024-08-07T14:02:10.000Z (3 months ago)
Last Synced: 2024-08-07T16:56:07.070Z (3 months ago)
Topics: backup, backup-cli, backup-database, backup-files, backup-manager, backup-script, backup-solution, backup-tool, backup-utility, backups, debian, encoding, ldap, quota, rdiff-backup, rdiffweb, restore, ssh-key, user-quota, web-interface
Language: Python
Homepage: https://rdiffweb.org
Size: 24.5 MB
Stars: 121
Watchers: 17
Forks: 27
Open Issues: 1
Metadata Files:
- Readme: README.md
- Funding: FUNDING.yml
- License: LICENSE
- Security: SECURITY.md

Awesome Lists containing this project

jimsghstars - ikus060/rdiffweb - A simplified backup management software for quick access to your archives through an efficient web interface. (Python)

README

![Rdiffweb Banner](https://gitlab.com/ikus-soft/rdiffweb/-/raw/master/doc/_static/banner.png)

website
• docs
• community
• demo

Welcome to Rdiffweb

Rdiffweb is a web application that allows you to view repositories generated
by [rdiff-backup](https://rdiff-backup.net/). The purpose of this
application is to ease the management of backups and quickly restore your data
with a rich and powerful web interface.

Rdiffweb is written in Python and is released as open source project under the
GNU GENERAL PUBLIC LICENSE (GPL). All source code and documentation are
Copyright Rdiffweb contributors.

Rdiffweb is actively developed by [IKUS Soft](https://www.ikus-soft.com/)
since November 2014.

The Rdiffweb source code is hosted on [Gitlab](https://gitlab.com/ikus-soft/rdiffweb)
and mirrored to [Github](https://github.com/ikus060/rdiffweb).

The Rdiffweb website is .

## Features

With its rich web interface Rdiffweb provide a notable list of features:

* Browse your backup
* Restore single file or multiple files as an archived
* Users authentication via local database and LDAP
* Users authorization
* Email notification when backup is not successful
* Configurable repository encoding
* Configurable retention period
* Backup statistics visualization using graphs
* SSH Keys management
* Disk quota visualization
* File and folder deletion

## Demo

If you quickly want to check how Rdiffweb is behaving, you may try our demo server hosted on:

[https://rdiffweb-demo.ikus-soft.com/](https://rdiffweb-demo.ikus-soft.com/)

Use the following credential to login:

* Username: admin
* Password: admin123

## Installation & Docker usage

For detailed installation steps, read the [Installation documentation](https://www.ikus-soft.com/archive/rdiffweb/doc/latest/html/installation.html).

## Current Build Status

[![Build Status](https://gitlab.com/ikus-soft/rdiffweb/badges/master/pipeline.svg)](https://gitlab.com/ikus-soft/rdiffweb/pipelines)

## Download

You should read the [Documentation](https://www.ikus-soft.com/archive/rdiffweb/doc/latest/html/index.html) to properly install Rdiffweb in your environment.

**Docker**

docker pull ikus060/rdiffweb

**Debian**

apt install lsb-release
curl -L https://www.ikus-soft.com/archive/rdiffweb/public.key | gpg --dearmor > /usr/share/keyrings/rdiffweb-keyring.gpg
echo "deb [arch=amd64 signed-by=/usr/share/keyrings/rdiffweb-keyring.gpg] https://nexus.ikus-soft.com/repository/apt-release-$(lsb_release -sc)/ $(lsb_release -sc) main" > /etc/apt/sources.list.d/rdiffweb.list
apt update
apt install rdiffweb

**Pypi**

pip install rdiffweb

## Newsletter

Subscribing to our newsletter is an effective way to stay up-to-date on the latest news about Rdiffweb.
By signing up for, you will receive regular updates and notifications about new features, updates, and releases related to Rdiffweb.

[Rdiffweb Newsletter](https://rdiffweb.org/contactus).

## Google Group

Join our growing community to get answers to your technical questions.

Rdiffweb users should use the [Rdiffweb Google Group](https://groups.google.com/forum/#!forum/rdiffweb).

## Documentation

Want to know more about Rdiffweb and learn it thoroughly? Read our complete documentation.

[Rdiffweb Documentation](https://www.ikus-soft.com/archive/rdiffweb/doc/latest/html/).

## Bug Reports

Bug reports should be reported on the Rdiffweb Gitlab at

## Professional support

Professional support for Rdiffweb is available by [contacting IKUS Soft](https://rdiffweb.org/contactus).

## Support Us Through Github Sponsorship

We are passionate about developing and maintaining this open-source project to make it better with each update. Your support can help us continue our efforts and enhance the project for the entire community. By becoming a Github Sponsor, you directly contribute to the project's sustainability and growth.

[Becoming a Sponsor](https://github.com/sponsors/ikus060)

# Changelog

## 2.9.2 (2024-07-03)

* Use default language to send notification if user doesn't have a "Preferred Language" #306

## 2.9.1 (2024-06-11)

* Add "Preferred Language" to Admin view to allow administrator to update the value
* Improve DockerImage by removing cache files
* Upgrade rdiff-backup to v2.2.6 in DockerFile

## 2.9.0 (2024-04-22)

* Add API entry point to create and list access token
* Add access token scope #298
* Add user's quota to Rdiffweb API #299
* Change Debian and Ubuntu version numbering
* Drop support for Debian Buster

## 2.8.9 (2023-02-19)

* Fix display of page settings for user with role "user"

## 2.8.8 (2023-01-08)

* Fix usage of `session-idle-timeout` in config file #296

## 2.8.7 (2024-01-04)

* Adjust the session idle and absolute timeouts to 10 and 30 minutes, respectively.
* Fix date calculation when generating report in January #295

## 2.8.6 (2023-11-24)

* Fix broken URL to
* Fix "Remember me" check box to allow cliking on label to ease usability #293
* Fix translation of backup status in email report #291
* Adding German translation file - credit to [Michael Nitzsche](https://github.com/einzelfabrik)

## 2.8.5 (2023-10-10)

* Fix reported version in Debian package #289
* Add support for WTForms v3.1.0
* Add last backup date to email notification

## 2.8.4 (2023-09-29)

* Add ratelimit to Access Token, SSH Keys and User creation [CVE-2023-5289](https://nvd.nist.gov/vuln/detail/CVE-2023-5289)

## 2.8.3 (2023-08-22)

* Drop support of Ubuntu Kinetic

## 2.8.2 (2023-08-22)

* Add Ubuntu Mantic Support
* Use Multi-Step to build Docker image
* Update layout of file statistics to display a single day
* Stop sending notification for ignored days #284
* Handle warning exit code 2 return by rdiff-backup version 2.2

## 2.8.1 (2023-08-01)

* Pin version of selenium to v4.10

## 2.8.0 (2023-07-31)

* Log detailed error message when restore command failed to help debugging
* Update interface used to manage users to be more user friendly #237
* Disable Disk Quota in users view when quota command is not configured #237
* Hide LDAP label in users view when LDAP is not configured #237
* Allow administrator to change user's reporting preferences
* Add support for Ubuntu Lunar
* Add support for SQLAlchemy v2.0 for forward compatibility
* When reaching 100% disk usage, show quota in red to improve visibility
* Send notification when user's quota reach 90% #46
* Add ratelimit to "send me a status report" to avoid email flooding #272 - credit to [Nehal Pillai](https://www.linkedin.com/in/nehal-pillai-02a854172)
* Fix creation of access token with expiration time #277
* Allow user to disable notification for selected day of week #278
* Add detailed file statistics to show created, modified and deleted files #103
* Trim spaces on verification code to improve usability #279
* Determine default username when user get redirected to login page #283
* Sort repository by dates in administration view #282
* Document how to configure fail2ban to improve server hardening
* Document how to configure certbot for automatic SSL certificate generation
* Update installation steps to include `arch=amd64`
* Update french translation

## 2.7.1 (2023-04-27)

* Fix encoding problem with older Outlook 2007 client #273

## 2.7.0 (2023-04-20)

* Support Python 3.11
* Provide a Monthly, Weekly or Daily repport for user #71
* Fix MFA verification code email's subjet #270
* Add translation for footer not in email layout
* Send email to administrator when a new version is available #266
* Improve automatic testing

## 2.6.1 (2023-03-22)

* Refused to start if `rdiff-backup` executable is not found #267

## 2.6.0 (2023-03-15)

* Review the application layout to use Fluid container to use all the space available on the screen
* Rename status view to Dashboard
* Display more useful data in Dashboard view: Backups per days, Oldest backup, Storage Usage, Average duration, Least Active, Most active
* Fix deletion confirmation of repositories within subdirectory #250
* Properly clean-up plain text email from HTML tags
* Send notification for inactive backup based on statistics
* Send notification using a new template following the web interface branding
* Send notification to user when repository get added or removed
* Send all notification to an optional "catch-all" email address configured using `--email-catch-all` option #258
* Redistribute logos in PNG format for better compatibility
* Disable error page logs for 4xx errors
* Add username and IP address to logs only for HTTP Request
* Fix LDAP integration to support non-list attributes - credit to [Shane Robinson](https://gitlab.com/shanesq)
* Add support of multiple required-group for LDAP integration
* Improve System Logs view to identify "User Activity", "Threats" and "User Login"
* Fix display of "* minutes ago" #264
* Add `default-lang` option to configure default language #263
* Allow user to select a preferred language #263
* Use user's preferred language when sending notifications #263

## 2.5.8 (2023-02-19)

* Support Setuptools v66 for compatibility with Debian Bookworm
* Fix execution of rdiffweb remove-older job to clean-up repository history #262

## 2.5.7 (2023-01-27)

* Enforce SQLAlchemy version between 1.2 or 1.4

## 2.5.6 (2023-01-11)

* Fixed display of Hamburger menu on mobiles (minarca#192)
* Change wording for interupted backup

## 2.5.5 (2022-12-23)

* Fix loading of Charts in Status page
* Ensure Gmail and other mail client doesn't create hyperlink automatically for any nodification sent by Rdiffweb to avoid phishing - credit to [Nehal Pillai](https://www.linkedin.com/in/nehal-pillai-02a854172)
* Sent email notification to user when a new SSH Key get added - credit to [Nehal Pillai](https://www.linkedin.com/in/nehal-pillai-02a854172)
* Ratelimit "Resend code to my email" in Two-Factor Authentication view - credit to [Nehal Pillai](https://www.linkedin.com/in/nehal-pillai-02a854172)
* Username are not case-insensitive - credits to [raiders0786](https://www.linkedin.com/in/chirag-agrawal-770488144/)
* Make sure that all ssh keys are unique, regardless of the user - credit to [Nehal Pillai](https://www.linkedin.com/in/nehal-pillai-02a854172)
* Disable translation caching

Breaking changes:

* Username with different cases (e.g.: admin vs Ammin) are not supported. If your database contains such username make sure to remove them before upgrading otherwise Rdiffweb will not start.

## 2.5.4 (2022-12-19)

* Discard `X-Forwarded-Host` headers credit to [Anishka Shukla](https://github.com/anishkashukla)
* Create proper symbolic link of `chartkick.js` on Ubuntu Jammy to fix loading of Charts in web interface
* Add CSRF verification on `/logout` credits to [reza.duty](https://rezaduty.me)

## 2.5.3 (2022-12-05)

* Add support for WTForms v3 to support Debian Bookworm
* Fix strange behavior in access token management #247

## 2.5.2 (2022-11-28)

* Block repository access when user_root directory is empty or relative path [CVE-2022-4314](https://nvd.nist.gov/vuln/detail/CVE-2022-4314) credit to [neverjunior](https://github.com/neverjunior)
* Replace admin password only when `--admin-password` option is provided #246
* Invalidate browser cache for `logo`, `headerlogo` and `favicon` on restart #245

## 2.5.1 (2022-11-11)

* Add support for Ubuntu Kinetic #240
* Disable filesize for deleted files to improve page loading #241

## 2.5.0 (2022-11-09)

This next release focus on two-factor-authentication as a measure to increase security of user's account.

* Store User's session information into database
* Update ldap plugin to load additional attributes from LDAP server
* Improve `/status` page error handling when `session_statistics` cannot be read
* Add support for Ubuntu Jammy
* Upgrade from Bootstrap v3 to v4 #204
* Replace Fontello by Font-Awesome v4
* Use CSS variables `var()` to customize themes using `--branding-X` options #239
* Remove usage of Jquery.validate
* Replace custom timsort by jquery DataTables #205
* Add Active Session managements #203
* Active session should be visible in user's profiles
* Active session may be revoked by user
* Active session should be visible in administration view
* Action session may be revoke by administrator
* Show number of active users within the last 24 hours in dashboard
* Handle migration of older Rdiffweb database by adding the missing `repos.Encoding`, `repos.keepdays` and `users.role` columns #185
* Replace deprecated references of `disutils.spawn.find_executable()` by `shutil.which()` #208
* Add two-factor authentication with email verification #201
* Generate a new session on login and 2FA #220
* Enforce permission on /etc/rdiffweb configuration folder
* Enforce validation on fullname, username and email
* Limit incorrect attempts to change the user's password to prevent brute force attacks #225 [CVE-2022-3273](https://nvd.nist.gov/vuln/detail/CVE-2022-3273) credit to [Nehal Pillai](https://www.linkedin.com/in/nehal-pillai-02a854172)
* Enforce password policy new password cannot be set as new password [CVE-2022-3376](https://nvd.nist.gov/vuln/detail/CVE-2022-3376) credit to [Nehal Pillai](https://www.linkedin.com/in/nehal-pillai-02a854172)
* Enforce better rate limit on login, mfa, password change and API [CVE-2022-3439](https://nvd.nist.gov/vuln/detail/CVE-2022-3439) [CVE-2022-3456](https://nvd.nist.gov/vuln/detail/CVE-2022-3456) credit to [Nehal Pillai](https://www.linkedin.com/in/nehal-pillai-02a854172)
* Enforce 'Origin' validation [CVE-2022-3457](https://nvd.nist.gov/vuln/detail/CVE-2022-3457) credit to [Nithissh12](Nithissh12)
* Define idle and absolute session timeout with agressive default to protect usage on public computer [CVE-2022-3327](https://nvd.nist.gov/vuln/detail/CVE-2022-3327) credit to [Nehal Pillai](https://www.linkedin.com/in/nehal-pillai-02a854172)
* Send email notification when enabling or disabling MFA [CVE-2022-3363](https://nvd.nist.gov/vuln/detail/CVE-2022-3363) credit to [Nehal Pillai](https://www.linkedin.com/in/nehal-pillai-02a854172)
* Use Argon2id to store password hash #231
* Fixed plugin priorities to ensure that jobs are scheduled at each startup #232
* Revoke previous user's sessions on password change [CVE-2022-3362](https://nvd.nist.gov/vuln/detail/CVE-2022-3362) credit to [Nehal Pillai](https://www.linkedin.com/in/nehal-pillai-02a854172)

Breaking changes:

* Drop Ubuntu Hirsute & Impish (End-of-life)
* `session-dir` is deprecated and should be replace by `rate-limit-dir`. User's session are stored in database.
* previous `.css` customization are not barkward compatible. Make usage of the `--branding-X` options.

**Thanks to [Nehal Pillai](https://www.linkedin.com/in/nehal-pillai-02a854172) with whom I collaborate to improve the security of this project.**

## 2.4.10 (2022-10-03)